Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting

AAML
Re-assign community